A Computer System for Assessing Hazards 



Field of the Invention 

[0001] This invention relates to a computer system for assessing hazards. The 
invention has particular, although not exclusive, utility in relation to assessing work place 
5 safety hazards. 

Background Art 

[0002] Job safety analysis and risk assessment are vital components in preventing 
work place injuries and the associated loss of productivity. 

[0003] To date, job safety assessment involves assessing potential hazards and 
10 determining what actions and/or equipment are required to minimise or eliminate the 
possibility of injury. This is currently performed using a printed risk assessment sheet 
that is completed prior to commencing work on a particular task. 

[0004] The printed risk assessment sheet is an empty table divided into at least the 
following columns: 

15 [0005] job steps; 

[0006] hazards; and 

[0007] controls. 

[0008] In completing the risk assessment, the person to perform the task deconstructs 
the job into a series of steps which are then recorded in the job steps column. The person 
20 then identifies the hazards associated with each step entered in the job steps column and 
records these hazards in the hazards column. Finally, the person identifies those controls 
associated with the hazards and records these controls in the controls column. 

[0009] In this manner, hazard data is dependent on step data and control data is 
dependent on hazard data. However, as the step data is dependent on the perception of 
25 the person completing the task, there can be significant inconsistencies in hazard 
assessments of the same task. 
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[0010] Additionally, completing the printed risk assessment sheet takes considerable 
time and is tedious for the user. This situation is further exacerbated because the job 
safety sheet needs to Ust all possible hazards and corresponding exposure avoidance 
controls for the task. 

S Disclosure of the Invention 

[0011] Throughout the specification, unless the context requires otherwise, the word 
"comprise" or variations such as "comprises" or "comprising," will be understood to 
imply the inclusion of a stated integer or group of integers but not the exclusion of any 
other integer or group of integers. 

10 [0012] In accordance with one aspect of this invention, there is provided a computer 
system for assessing hazards, comprising: 

[0013] a database storing hazard data, safety requirement data and work data, the 
safety requirement data being associated with the hazard data and the hazard data being 
associated with the work area data; 

15 [0014] first interface arranged to present potential work areas from the work area 
data to a user, and to receive input from the user identifying the work area associated 
with a particular task; 

[0015] second interface arranged to present potential hazards from the hazard data to 
the user, each potential hazard being associated with the work area identified by the user 
20 as associated with the particular task, and to receive input from the user identifying 
which potential hazards are associated with the particular task; and 

[0016] reporter arranged to present to the user each hazard identified by the user for 
the task, and to present with each identified hazard the safety data associated with said 
hazard from the database. 

25 [0017] In this manner, the present invention differs firom the systems disclosed in 
WO 98/1147 ("Fetherston") and US 5,664,112 ("Sturgeon") in two important aspects. 
Firstly, neither Fetherston nor Sturgeon discloses an interactive questioning environment. 
Instead, both the Fetherston and Sturgeon systems allow the user to search for 
information in respect of a particular hazard. Secondly, neither Fetherston nor Sturgeon 
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discloses a relationship between work area data and hazard data as disclosed by the 
present invention. 

[0018) Additionally, the present invention differs from the system disclosed in WO 
99/59094 ("Shell Oil") for reasons that the Shell Oil system does not incorporate a 
5 relationship between work area data and hazard data as disclosed above. The reference 
to work area data in the Shell Oil system being limited to simply recording the location 
of the identified hazard. 

[0019] Preferably, the safety requirement data includes personal protective 
equipment data, safe working requirements data, equipment and permit data, each of 
1 0 which is associated with the hazard data. 

[0020] Preferably, the database also stores risk-rating data, the risk rating data being 
associated with the hazard data, and wherein the reporter is arranged to present the risk 
rating associated with the hazard with each identified hazard. 

[0021] Preferably, the computer system further comprises risk assessor arranged to 
15 present at least one question to an authorized person regarding a hazard in the hazard 
data, and to calculate from the authorized person's responses thereto a risk rating for that 
hazard, and to store the risk rating in the risk rating data associated with the hazard. 

[0022] Preferably, said hazard data is arranged hierarchically to form hazard category 
data and hazard descriptor data, each hazard descriptor being associated with a hazard 
20 category, wherein said second interface is arranged to present to a user each hazard 
category, and if the user indicates a hazard category is applicable for the particular task to 
also present each hazard descriptor associated with that hazard category to the user, 
wherein the safety requirement data and risk rating data is associated with the hazard 
descriptor data. 

25 [0023] Preferably, the database includes work type data, the work area data being 
associated with the work type data. 

[0024] Preferably, the first interface and the second interface are combined. 

[0025] In accordance with a second aspect of the invention fliere is a user computer 
for use in a computer system for assessing hazards, the user computer comprising: 
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[0026] communications means for receiving hazard data, safety requirement data and 
work area data from a database stored on a server computer, the safety requirement data 
being associated with the hazard data and the hazard data being associated with the work 
area data; 

[0027] first interface arranged to present potential work areas from the work area 
data to a user, and to receive input from the user identifying ttie work area associated 
with a particular task; 

[0028] second interface arranged to present potential hazards from the hazard data to 
the user, each potential hazard being associated with the work area identified by the user 
as associated with the particular task, and to receive input from the user identifying 
which potential hazards are associated with the particular task; and 

[0029] reporter arranged to present to the user each hazard identified by the user for 
the task, and to present with each identified hazard the safety data associated with said 
hazard from the database. 

[0030] Preferably, the safety requirement data received includes personal protective 
equipment data, safe working requirements data, equipment and permit data, each of 
which is associated with the hazard data. 

[0031] Preferably, the communications means also receives risk-rating data from the 
database, the risk rating data being associated with the hazard data and the reporter being 
arranged also to present to the user the risk rating associated with the hazard with each 
identified hazard. 

[0032] Preferably, the hazard data received is arranged hierarchically to form hazard 
category data and hazard descriptor data, each hazard descriptor being associated with a 
hazard category, wherein said second interface is arranged to present to the user each 
hazard category associated with the work area identified by the user as associated with 
the particular task, and, if the user indicates a hazard category as applicable for the 
particular task, to also present each hazard descriptor associated with that hazard 
category to the user, along with the safety requirement data. 

[0033] Preferably, the communications means also receives work type data, the work 
type data being associated with the work area data. 
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[0034] Preferably, the first interface and the second interface are combined. 

[0035] In accordance with a third aspect of the present invention there is a server 
computer for use in a computer system for assessing hazards, the user computer 
comprising: 

5 [0036] at least one database, each database storing hazard data, safety requirement 
data and work area data, the safety requirement data being associated with the hazard 
data and the hazard data being associated with the work area data; 

[0037] communicator for transmitting work area data and hazard data to an interface 
means of a user computer and receiving data from the interface means identifying the 
1 0 potential hazards associated with a particular task; and 

[0038] reporter arranged to generate a report on each hazard identified by the user for 
the task, and to present with each identified hazard the safety data associated with said 
hazard from the database, the report being provided to a user of the user computer. 

[0039] Preferably, the safety requirement data includes personal protective 
15 equipment data, safe working requirements data, equipment and permit data, each of 
which is associated with the hazard data. 

[0040] Preferably, the at least one database also stores risk rating data, the risk rating 
data being associated with the hazard data, and wherein the reporter is arranged to 
present the risk rating associated with the hazard with each identified hazard. 

20 [0041] Preferably, the server computer further comprises risk assessor arranged to 
present at least one question to an authorized person regarding a hazard in the hazard 
data, and to calculate from the authorized person's responses thereto a risk rating for that 
hazard, and to store the risk rating in the risk rating data associated with the hazard. 

[0042] Preferably, the hazard data is arranged hierarchically to form hazard category 
25 data and hazard descriptor data, each hazard descriptor being associated with a hazard 
category, wherein said communicator is arranged to transmit hazard category data and 
hazard descriptor data to the interface. 

[0043] Preferably, the at least one database includes work type data, the work area 
data being associated with the work type data. 
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[0044] Preferably: 

[0045] each database is associated with at least one user having permission to access 
the database; 

[0046] the communicator is adapted to transmit to the user computer operated by the 
5 at least one user, work area data and hazard data stored in the database that the user has 
permission to access; and 

[0047] the reporter is adapted to generate the report on each hazard identified by the 
user for the task using data stored in the database that the user has permission to access, 
the report being provided to the at least one user of the user computer. The present 
10 invention therefore has the advantage that it provides a computer system that provides a 
convenient mechanism for efficiently producing a safety report for a particular task. 

[0048] Additionally, by providing a predefined database of safety requirements and 
associated risk rating for each hazard descriptor, user subjectivity and human error are 
significantly reduced. In addition, the report generated by the computer system provides 
15 a mechanism for manually calculating the user-perceived risk of each hazard so that it 
may be contrasted with the computer-generated risk rating for that hazard. This will be 
of assistance for user assessment of the task to be performed and its associated risk. 

Brief Description of the Drawings 

[0049] Two embodiments of this invention will now be described with reference to 
20 the accompanying drawings, in which: 

[0050] Figure 1 is a schematic illustration of the computer device used for 
implementing the computer system of the present invention; 

[0051] Figure 2 shows the arrangement of data in the computer system for assessing 
hazards according to the first embodiment of the invention; 

25 [0052] Figures 3 A - 3D show an example of a job safety analysis report produced by 
the computer system for assessing hazards according to the preferred embodiment of the 
invention; 
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[00531 Figure 4 shows the risk assessment procedure utilized in the preferred 
embodiment of the invention; 

[0054] Figure 5 is a network diagram showing the computer system for assessing 
hazards according to the second embodiment of the invention and users' computers 
5 connected thereto via a data network; 

[0055] Figure 6 shows the arrangement of data in each database of the computer 
system for assessing hazards according to the second embodiment of the invention; 

[0056] Figure 7 is a flowchart of the operations that can be performed by a user on 
the computer system shown in Figure 5; 

10 [0057] Figure 8 is a schematic illustration of a form, as presented to a user of the 
system for entering general details for preparing a hazard report; and 

[0058] Figure 9 is a schematic illustration of the manner in which hazard descriptor 
questions are presented to a user. 

Best Mode(s) for Carrying Out the Invention 

15 [0059] The embodiments are directed towards a computer system for assessing work 
place hazards. However, it should be appreciated that the invention may be utilized in 
other fields where assessment of hazards and risk is required. 

[0060] The computer system of the first embodiment is implemented using any 
suitable computing device, such as a desktop computer, a portable computer or a digital 

20 assistant or computational tablet. Any suitable computer device can be used, provided it 
is capable of running appropriate software. In this embodiment, the computer device is a 
desktop personal computer 1 comprising a processing unit 2, display 3, keyboard 4 and 
mouse 5. Such personal computers are well known in the art and, as such, need not be 
described in any further details here in except as is relevant to the present invention. The 

25 processing unit 2 includes appropriate memory and processor - again as is well known in 
the art - and which executes computer software to provide the computer system for 
assessing hazards. 

[0061] The computer system includes a database 10, which is shown in Figure 2. 

The database 10 can be provided within memory in the computer 1, or can be located 
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elsewhere and accessed remotely - as will be discussed in relation to the second 
embodiment below. The database 10 stores several types of data, including work area 
data 11, hazard category data 12 and hazard descriptor data 14. 

[0062] The work area data 1 1 includes information regarding the physical area or 
5 location where the work it is to be carried out, or it could relate to a particular type of 
work carried out. 

[0063] The hazard category data 12 comprises categories of potential hazards, and 
the hazard descriptor data 14 comprises hazard descriptor questions 46. Each hazard 
descriptor question 46 in the hazard descriptor data 14 is linked to a hazard category in 
10 the hazard category data 12. The hazard category data is linked to the work area data 11. 
The hazard descriptor questions 46 are used to identify hazards associated with a 
particular category of hazard. By presenting the potential hazards as questions the user is 
able to more easily identify possible hazards associated with a particular task. 

[0064] The database 10 also includes personal protective equipment (PPE) data 16, 
15 safe working requirements (SWR) data 18, equipment data 20, permit data 22 and risk 
rating data 24, each of which are linked with one or more of the hazard descriptor 
questions 46 in the hazard descriptor data 14 - and which are used to provide exposure 
avoidance controls 48 to assist users in avoiding identified hazards for a particular task. 

[0065] The database 10 can also store general information, for example about the 
20 user. 

[0066] In use, to produce a safety report 54 for a particular task or job, the user firstly 
inputs general information, such as user details, and reference details about the particular 
task, and selects the appropriate work area - for the task - from the work area data 11. 
This is done by entering the details in a form 60 presented to the user on the display 3 - 
25 as illustrated schematically at Figure 8. 

[0067] The computer system is then operable to present to the user - on the display 3 

- a series of questions which ask whether each of the hazard categories stored in the 

hazard category data 12 - and that are linked to the selected work area - is applicable to 

this task. If the user answers "no," i.e. that it is not relevant, then a question 

30 corresponding to the next hazard category from the hazard category data 12 is presented 

to the user. If the user indicates that a hazard category from the hazard category data 12 
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is applicable to this task, by answering "yes", then the computer software references the 
hazard descriptor data 14 that is linked to that identified hazard category and presents, to 
the user, those hazard descriptor questions 46 which are applicable to this task. Thus, for 
a particular work area, the user is presented with hazard descriptor questions 46 that are 
5 linked to that work area. The user can then answer "yes" or "no" to each of these hazard 
descriptor questions 46. By answering "yes" or "no" to each presented hazard descriptor 
question 46, the user is selecting whether that particular hazard is relevant to that 
particular task or job. Examples of hazard descriptor questions 46 are shown in Figures 
3B to 3D - where they are printed in the final safety report 54. 

10 [0068] This process is repeated until all of the hazard categories firom the hazard 
category data 12 and relevant hazard descriptor questions 46 from the hazard descriptor 
data 14 have been presented to the user, and answered. 

[0069] Figure 9 is an example of the form in which these questions 46 are presented 
to the user at the display 3. In this example, the questions relate to potential 
1 5 environmental hazards. 

[0070] The database 10 is structured as a relational database that is queried using the 
Structured Query Language or any other suitable query language. 

[0071] The database 10 is queried in a manner such that, when a user selects a 
particular hazard category as applicable to that task - that is by answering "yes" when 

20 presented with a question asking if that hazard category is relevant - then the user is 
immediately presented with the hazard descriptor questions 46 linked to that hazard 
category data 12, before being able to proceed to the next hazard category question 
linked to that work area data 11. That is, the data within the database 10 is queried in a 
hierarchical manner, which means that a user must deal with each hazard category and 

25 it's related hazard descriptor questions 46, before proceeding with the next. In addition, 
and before a user can move to the next hazard category or descriptor question, the user 
must answer the presented question - even to answer "no" i.e. to indicate that the hazard 
category. 

[0072] The work area related hierarchical ordering of the hazard categories and 
30 hazards prevents the user being required to answer a large number of questions which 
may not be relevant to the particular tasks they are to perform. 
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[0073] The computer software then references the PPE data 16, the SWR data 18, the 
equipment data 20, the permit data 22 and the risk rating data 24 linked with each hazard 
descriptor question 46 identified by the user as being relevant to the task to be performed, 
to identify the required exposure avoidance controls 48, as well as any permits and the 
5 risk ratings for each hazard - as will be discussed in fiirther detail below. 

[0074] Once all the relevant hazard descriptor questions 46 have been answered, and 
the equipment, permits and risk ratings linked to selected hazard descriptor questions 46 
identified, then the computer software is operable to produce the safety report 54, an 
example of which is shown in Figures 3A to 3D. 

10 [0075] The first section of the report (Figure 3 A) includes the general information 
and any appropriate general or mandatory safety requirements. 

[0076] As shown in figure 3B, the safety report 54 includes a permit section 30 in 
which any permits that may be required in order to perform the task having regard to the 
nature of the hazards and equipment to be used are listed at 32. The permits 32 shown in 
15 the permits section 30 are obtained by referencing the permit data 22 linked with each 
selected hazard descriptor question 46 in the hazard descriptor data 14 and identified by 
the user as being applicable to the relevant task and by collating all of the permits. 

[0077] The safety report 54 also includes an equipment check requirement section 
34, in which each piece of equipment 36 identified by the user as being applicable to the 
20 task and which may be hazardous is listed, along with equipment check requirements 38 
for that piece of equipment 36. The equipment check requirement section 34 is 
populated firom the equipment data 20 by referencing those parts of the equipment data 
20 that are linked with the hazard descriptor questions 46 in the hazard descriptor data 14 
and identified by the user as being applicable for this task. 

25 [0078] The safety report 54 also includes a hazards section 40 that comprises a job 
execution portion 42 and a job closeout portion 44. The hazard section 40 includes all 
those hazard descriptors - in the form of the hazard descriptor questions 46 - as identified 
by the user as being relevant to the task, along with those exposure avoidance controls 48 
that are linked to each of the hazard descriptor questions 46. The exposure avoidance 

30 controls 48 are obtained by referencing the PPE data 16, the SWR data 18 and the 
equipment data 20 linked to the particular hazard descriptor 46. 
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[0079] Adjacent to each hazard descriptor 46 is listed a risk rating 50 obtained by 
referencing the risk rating data 24 linked with the particular hazard descriptor 46. The 
risk rating shown at 50 is categorized as either L, M, H or E corresponding with low, 
medium, high ane extreme risk, respectively. 

5 [0080] Further, the report includes a space at 52 that is initially empty, and which is 
for the user to manually assess the risk and enter it in situ. 

[0081] The user may use the report as-is, or, preferably, will insert a user-perceived 
risk indication for each hazard descriptor 46. 

[0082] To provide a user-perceived risk indication for each hazard descriptor 46, the 
10 user answers the five questions that are shown in Figure 4 under headings, Exposure, 
Controls and Consequence. The five questions are presented to the user on the display 3 
for the user to answer. Each question has a multiple-choice answer, with each answer 
having a corresponding score as shown in Figure 4. The user then sums the scores for 
the questions under the headings Exposure and Controls to calculate a likelihood value. 
15 This likelihood value along with the score associated with the user's answer to the 
question under the heading Consequence is cross-referenced with the risk matrix shown 
in Figure 4 in order to determine the user-perceived risk indication for the hazard 
descriptor 46. The user-perceived risk indication is then entered by the user in the space 
52 adjacent that particular hazard descriptor 46. This assessment is preferably performed 
20 in situ at the site where the task will be performed. This allows a comparison of the risk 
rating obtained from the computer system for a hazard to be compared with the user's 
assessment of the risk of that hazard having regard to the circumstances of the particular 
task. If there is a discrepancy between the two risk ratings, the user can take appropriate 
action to ensure they are not exposed to additional hazards. 

25 [0083] In this embodiment, the database 10 can be edited by authorized persons with 
appropriate privileges to add, edit and remove data to any of the data categories 11-24. 
An authorized person may also edit the links between the hazard category data 12 and the 
hazard descriptor data 14, and between the hazard descriptor data 14 and each of the data 
categories 16-24. It is preferred that where the authorized person wishes to edit the risk 

30 rating for a particular hazard, or to determine the risk rating for a newly created hazard in 
the second hazard data 14, the computer system presents the authorized person with the 
same questions that are shown in Figure 4, and which are used in determining the user- 
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perceived risk, so that the predefined risk rating 24 is determined in accordance with the 
same criteria as those used to assess the user-perceived risk. 

[0084] The second embodiment is directed towards a computer system 100 of the 
same general form as the computer system of the first embodiment. The same reference 
5 numerals are used to denote like parts to those in the first embodiment. 

[0085] The computer system 100 differs from the computer system of the first 
embodiment in that it is arranged to communicate via a data network 102 such as the 
Internet. 

[0086] In the embodiment, the computer system 100 is accessed on a casual basis by 
10 a first user 104, and on a subscription basis by a second user 106 that requires the ability 
to produce safety reports for a single site and a third user 108a, 108b and 108c that 
requires the abiUty to produce safety reports for three sites denoted by the suffixes a, b 
and c. As shown in Figure 5, each of the users 104, 106, and 108 is connected the data 
network 102 by appropriate computer facilities - such as a personal computer. 

15 [0087] The computer system 100 includes a database 110, a first user database 112 
and a second user database 1 14. Each of the databases 1 10, 1 12 and 1 14 is of the same 
general form, which is illustrated in Figure 5. As shown, the databases 1 10, 1 12 and 1 14 
are similar to the database 10 of the first embodiment, with the addition of work type data 
1 16 thereto. The work type data 1 16 is linked to work area data 1 1, so that once a user 

20 has specified a work type, possible work areas linked to the selected work type are 
presented for selection, firom which the process of creating a safety report proceeds as 
described above. 

[0088] In this embodiment, the subscription-based users 106 and 108 may be 
corporations with many employees that access the computer system 100 using user 

25 names and passwords. Since these corporations may require the ability to customise 
entries in the database according to their requirements, the computer system 100 includes 
the user databases 112 and 114 fliat are associated with the users 106 and 108, 
respectively. When an employee of either of the users 106 or 108 that access the 
computer system 100, the computer system 100 determines the user 106 or 108 has a user 

30 database associated therewith, and references the associated user database instead of the 
database 110. Further, a system administrator can be appointed at each site of a 
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corporation, who is responsible for assigning user names and passwords to employees. 
The term subscription user is used to include employees where the context is appropriate. 

[0089] It should be appreciated that subscription users do not need to have an 
associated database, in which case its employees continue to access the database 1 10. 

[0090] Figure 7 is a flow diagram showing the operations that casual users and 
subscription users can perform using the computer system 100. As shown, casual users 
104 can only create a new safety report at 120. The creation of new safety report is 
performed in the same general manner as described in relation to the first embodiment. 
In this embodiment, the user is first asked to select a work type from the work type data 
116, shown in Figure 6 at 122. The user then chooses a work area from the work area 
data 11 linked to the selected work type, shown in Figure 7 at 124. The user is then 
presented with hazard categories from the hazard category data 12 at 126, from which the 
user selects those hazard categories that are applicable to the task. Next, for each hazard 
category selected as being applicable at the task, the user is presented with hazard 
descriptor questions from the hazard descriptor data 14 at 128. 

[0091] Based on the user's answers to these questions, the computer system 100 then 
references the PPE data 16, the SWR data 18, the equipment data 20, the permit data 22 
and the risk rating data 24 linked with each hazard descriptor question identified by the 
user as being relevant to the task to be performed and produces the safety report in the 
same manner as described above in relation to the first embodiment. This is shown in 
Figure 7 at 129. 

[0092] The safety report produced in this embodiment contains similar information to 
that shown in Figs 3 A-3D, however the arrangement of the information may be altered. 

[00931 Subscription users can also create a new safety report at 120 using the 
database 1 10 or a user database 1 12, 1 14 as appropriate. 

[0094] Further, subscription users can recover a previously completed safety report at 
130. This allows subscription users to quickly produce a safety report for a repeated task, 
or to use a safety report for a similar task as a starting point in producing a new safety 
report. Thus, having recovered an existing safety report, a subscription user can proceed 
to select a primary work type at 122. 
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[0095] In addition, subscription users can report a hazard at 1 32. A subscription user 
completes an initial report at 134 describing the hazard. This report is flagged to the 
system administrator within the subscription user corporation at 136. The system 
administrator within the subscription user corporation then performs a follow-up action at 
5 138 by making any assessment of the hazard and the existing exposure avoidance 
controls that are linked to that risk. At 140, the system administrator resolves whether 
any change to the contents of the user database are required. If so, a request to amend the 
user database is submitted to the computer system 100 at 142, following which the user 
database is amended as requested. A hazard report may trigger a change in any of the 
10 work type data 116, work area data 11, hazard category data 12, hazard descriptor data 
14, PPE data 16, SWR data 18, equipment data 20, permit data 22 and/or the risk rating 
data 24, according to requirements. 

[0096] The system administrator then performs a closeout action on the hazard report 
at 142. 

15 [0097] As mentioned above, in this second embodiment users access the system 
using the Internet, and each of the forms are presented to the user in the form of web 
pages with appropriate buttons or check boxes for selecting appropriate answers. The 
use and operation of the Internet and web pages for communicating data between 
terminals is well known to persons skilled in the art, and, in so far as it is not relevant to 

20 the present invention need not be described in any further detail herein. Other means of 
data communication can be used to transmit the data between the user and the system - 
such as point-to-point transmission, wireless data communication, LAN's or any other 
suitable method. 

[0098] The second embodiment provides a convenient system for allowing multiple 
25 users to produce safety reports and manage their databases from a central computer 
system. Further, provision is made for ad-hoc users to create safety reports on an as- 
needed basis. 

[0099] It should be appreciated that the scope of this invention is not limited to the 
particular embodiment described above. The system can also be adapted to include 
30 further data such as incident reporting and investigation, employee data, training 
information, workplace inspections, and site audits. In each case, the information can be 
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suitably linked within the database to ensure that information is appropriately carried into 
the relevant reports, and trigger changes in the database 10, 1 10 as appropriate. 
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